nerdexam
Microsoft

MS-102 · Question #72

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. Assigning the SharePoint Administrator role does not grant permissions to manage Microsoft Defender for Office 365 settings and policies across Microsoft Teams, SharePoint, and OneDrive.

Submitted by marco_it· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription. You create an account for a new security administrator named SecAdmin1. You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive. Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePoint Administrator role. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(25 responses)
  • A
    16% (4)
  • B
    84% (21)

Why each option

Assigning the SharePoint Administrator role does not grant permissions to manage Microsoft Defender for Office 365 settings and policies across Microsoft Teams, SharePoint, and OneDrive.

AYes

Yes, is incorrect because the SharePoint Administrator role's scope is service administration of SharePoint and OneDrive, not the security policies of Defender for Office 365.

BNoCorrect

No, assigning the SharePoint Administrator role primarily grants permissions to manage SharePoint Online and OneDrive for Business settings, but it does not provide the necessary permissions to manage Microsoft Defender for Office 365 settings and policies which are managed through security-specific roles in the Microsoft 365 Defender portal.

Concept tested: Microsoft 365 administrative role scope

Source: https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#sharepoint-administrator

Topics

#Microsoft Defender for Office 365#Microsoft 365 roles#Role-Based Access Control (RBAC)#Security administration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-102 Practice